CVE-2026-20241: Cisco Identity Services Engine Authorization Bypass Vulnerability

1 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20241

Pro tohle CVE zatím žádné hodnocení CVSS nemám. Buď ho záznam CVE Programu neuvádí, nebo ještě nebyl vydaný — advisories často citují rezervované ID dřív, než záznam vznikne.

· zachyceno

SPOJENO PŘES CVE Cisco Identity Services Engine Authorization Bypass Vulnerability

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 5.3, CVEs: CVE-2026-20241, Summary: A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an…

CVSS 5.3 CVE-2026-20241 Cisco FI US

tg: zranitelnost tp: identita

· zachyceno · NCSC-FI · Cisco Identity Services Engine Authorization Bypass Vulnerability · Cisco PSIRT · Cisco Identity Services Engine Authorization Bypass Vulnerability